CVE-2014-8373

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-12-11 · updated 2026-06-17
Weakness: CWE-264

Description

The VMware Remote Console (VMRC) function in VMware vCloud Automation Center (vCAC) 6.0.1 through 6.1.1 allows remote authenticated users to gain privileges via vectors involving the "Connect (by) Using VMRC" function.

Affected products

VMware Vcloud Automation Center: 6.0.1, 6.0.1.1, 6.0.1.2, 6.1, 6.1.1

References

http://packetstormsecurity.com/files/129455/VMware-Security-Advisory-2014-0013.html
http://seclists.org/fulldisclosure/2014/Dec/33
http://secunia.com/advisories/61169
http://www.securityfocus.com/archive/1/534186/100/0/threaded
http://www.securitytracker.com/id/1031323
http://www.vmware.com/security/advisories/VMSA-2014-0013.html
http://packetstormsecurity.com/files/129455/VMware-Security-Advisory-2014-0013.html
http://seclists.org/fulldisclosure/2014/Dec/33
http://secunia.com/advisories/61169
http://www.securityfocus.com/archive/1/534186/100/0/threaded
http://www.securitytracker.com/id/1031323
http://www.vmware.com/security/advisories/VMSA-2014-0013.html

Get alerted when CVE-2014-8373 or the next vulnerability affects your stack